text:
Q: Where will I unregister NSNotification? I often registered NSNotification in a viewDidLoad and unregistered in a dealloc. We don't have dealloc in ios 5. Where will I unregister NSNotification?

A: You can still use dealloc in ARC (I assume this is what you mean by iOS 5) - just define the method as before. Just don't call [super dealloc].
- (void) dealloc {
   // unregister and clean up.
   // NO SUPER!
}

I use this pattern a lot - especially when checking for leaks it's handy to put an NSLog in there.


My husband Ron was diagnosed with pancreatic cancer in 2004 and passed away a year later. He was the epitome of health, so we were stunned when he received a pancreatic cancer diagnosis. We were devastated to learn the statistics of the disease during his treatment, but we remained optimistic. My daughter reached out to the Lustgarten Foundation for additional information and we attended the Lustgarten Walk – Long Island in 2006. We knew that we wanted to start our own walk to raise awareness in our area and in 2007, we founded the Lustgarten Walk—Paramus, which raised nearly $45,000. Each year, our walk has grown, and to date we have raised more than $1.5 million for pancreatic cancer research. We are committed to this cause and to the Lustgarten Foundation for seeing us through in our time of need.


Size isn't everything! When it comes to a good book it's the quality that counts, not how many pages it holds. Never judge a book by its cover! Whether it takes you one cup of coffee at your favorite coffee house to finish a book, or five cups of tea while you're snuggled under a blanket, it's all about the quality! Your cat would be sure to agree if they could talk! If you're a nerd who loves a good read this book shirt is perfect for you!


DNO Support™ specializes in Proactive Management IT Services that are designed to provide enterprise class IT support, within a small business budget. Our approach is to be proactive in preventing computer problems before they happen. We accomplish this goal by maintaining an optimized computing environment within your offices. Our service combines enterprise class technologies, highly qualified staff, industry standard methodologies, and guaranteed response times to provide a comprehensive, reliable and affordable IT support solution.
DNO Support™ provides a comprehensive solution to manage and support your MAC's and PCs. Our combination of proactive maintenance, Antivirus protection, and on demand live helpdesk support will ensure your systems are functional and secure, resulting in maximum productivity and user satisfaction.
For most businesses, the servers represent the lifeblood of the company. Our Managed Server offering includes, 24x7 server monitoring and support, proactive maintenance, and system administration to keep your servers and server applications running around the clock.
To survive in today's business environment, you need stable IT. To thrive, you need visionary IT. The DNO Support™ Managed Network includes CIO services designed to the necessary information and strategic IT guidance to meet the current and future objectives of your firm. Our Managed Network service also includes third party and network infrastructure management services to provide a single point of accountability for IT operations.
Are you finding it hard to afford the proper expertise and staffing levels to properly run IT operations? DNO Support™ can provide a customized supplemental IT support solution to fill the gaps of your internal IT department, at a cost lower than hiring additional internal employees.


text:
layout: global
displayTitle: Spark Security
title: Security
license: |
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

     http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
---
* This will become a table of contents (this text will be scraped).
{:toc}

# Spark Security: Things You Need To Know

Security in Spark is OFF by default. This could mean you are vulnerable to attack by default.
Spark supports multiple deployments types and each one supports different levels of security. Not
all deployment types will be secure in all environments and none are secure by default. Be
sure to evaluate your environment, what Spark supports, and take the appropriate measure to secure
your Spark deployment.

There are many different types of security concerns. Spark does not necessarily protect against
all things. Listed below are some of the things Spark supports. Also check the deployment
documentation for the type of deployment you are using for deployment specific settings. Anything
not documented, Spark does not support.

# Spark RPC (Communication protocol between Spark processes)

## Authentication

Spark currently supports authentication for RPC channels using a shared secret. Authentication can
be turned on by setting the `spark.authenticate` configuration parameter.

The exact mechanism used to generate and distribute the shared secret is deployment-specific. Unless
specified below, the secret must be defined by setting the `spark.authenticate.secret` config
option. The same secret is shared by all Spark applications and daemons in that case, which limits
the security of these deployments, especially on multi-tenant clusters.

The REST Submission Server and the MesosClusterDispatcher do not support authentication.  You should
ensure that all network access to the REST API & MesosClusterDispatcher (port 6066 and 7077
respectively by default) are restricted to hosts that are trusted to submit jobs.

### YARN

For Spark on [YARN](running-on-yarn.html), Spark will automatically handle generating and
distributing the shared secret. Each application will use a unique shared secret. In
the case of YARN, this feature relies on YARN RPC encryption being enabled for the distribution of
secrets to be secure.

### Kubernetes

On Kubernetes, Spark will also automatically generate an authentication secret unique to each
application. The secret is propagated to executor pods using environment variables. This means
that any user that can list pods in the namespace where the Spark application is running can
also see their authentication secret. Access control rules should be properly set up by the
Kubernetes admin to ensure that Spark authentication is secure.

Property Name	Default	Meaning

  spark.authenticate
  false
  Whether Spark authenticates its internal connections.

  spark.authenticate.secret
  None

    The secret key used authentication. See above for when this configuration should be set.

Alternatively, one can mount authentication secrets using files and Kubernetes secrets that
the user mounts into their pods.

Property Name	Default	Meaning

  spark.authenticate.secret.file
  None

    Path pointing to the secret key to use for securing connections. Ensure that the
    contents of the file have been securely generated. This file is loaded on both the driver
    and the executors unless other settings override this (see below).

  spark.authenticate.secret.driver.file
  The value of spark.authenticate.secret.file

    When specified, overrides the location that the Spark driver reads to load the secret.
    Useful when in client mode, when the location of the secret file may differ in the pod versus
    the node the driver is running in. When this is specified,
    spark.authenticate.secret.executor.file must be specified so that the driver
    and the executors can both use files to load the secret key. Ensure that the contents of the file
    on the driver is identical to the contents of the file on the executors.

  spark.authenticate.secret.executor.file
  The value of spark.authenticate.secret.file

    When specified, overrides the location that the Spark executors read to load the secret.
    Useful in client mode, when the location of the secret file may differ in the pod versus
    the node the driver is running in. When this is specified,
    spark.authenticate.secret.driver.file must be specified so that the driver
    and the executors can both use files to load the secret key. Ensure that the contents of the file
    on the driver is identical to the contents of the file on the executors.

Note that when using files, Spark will not mount these files into the containers for you. It is up
you to ensure that the secret files are deployed securely into your containers and that the driver's
secret file agrees with the executors' secret file.

## Encryption

Spark supports AES-based encryption for RPC connections. For encryption to be enabled, RPC
authentication must also be enabled and properly configured. AES encryption uses the
[Apache Commons Crypto](https://commons.apache.org/proper/commons-crypto/) library, and Spark's
configuration system allows access to that library's configuration for advanced users.

There is also support for SASL-based encryption, although it should be considered deprecated. It
is still required when talking to shuffle services from Spark versions older than 2.2.0.

The following table describes the different options available for configuring this feature.

Property Name	Default	Meaning

  spark.network.crypto.enabled
  false

    Enable AES-based RPC encryption, including the new authentication protocol added in 2.2.0.

  spark.network.crypto.keyLength
  128

    The length in bits of the encryption key to generate. Valid values are 128, 192 and 256.

  spark.network.crypto.keyFactoryAlgorithm
  PBKDF2WithHmacSHA1

    The key factory algorithm to use when generating encryption keys. Should be one of the
    algorithms supported by the javax.crypto.SecretKeyFactory class in the JRE being used.

  spark.network.crypto.config.*
  None

    Configuration values for the commons-crypto library, such as which cipher implementations to
    use. The config name should be the name of commons-crypto configuration without the
    commons.crypto prefix.

  spark.network.crypto.saslFallback
  true

    Whether to fall back to SASL authentication if authentication fails using Spark's internal
    mechanism. This is useful when the application is connecting to old shuffle services that
    do not support the internal Spark authentication protocol. On the shuffle service side,
    disabling this feature will block older clients from authenticating.

  spark.authenticate.enableSaslEncryption
  false

    Enable SASL-based encrypted communication.

  spark.network.sasl.serverAlwaysEncrypt
  false

    Disable unencrypted connections for ports using SASL authentication. This will deny connections
    from clients that have authentication enabled, but do not request SASL-based encryption.

# Local Storage Encryption

Spark supports encrypting temporary data written to local disks. This covers shuffle files, shuffle
spills and data blocks stored on disk (for both caching and broadcast variables). It does not cover
encrypting output data generated by applications with APIs such as `saveAsHadoopFile` or
`saveAsTable`. It also may not cover temporary files created explicitly by the user.

The following settings cover enabling encryption for data written to disk:

Property Name	Default	Meaning

  spark.io.encryption.enabled
  false

    Enable local disk I/O encryption. Currently supported by all modes except Mesos. It's strongly
    recommended that RPC encryption be enabled when using this feature.

  spark.io.encryption.keySizeBits
  128

    IO encryption key size in bits. Supported values are 128, 192 and 256.

  spark.io.encryption.keygen.algorithm
  HmacSHA1

    The algorithm to use when generating the IO encryption key. The supported algorithms are
    described in the KeyGenerator section of the Java Cryptography Architecture Standard Algorithm
    Name Documentation.

  spark.io.encryption.commons.config.*
  None

    Configuration values for the commons-crypto library, such as which cipher implementations to
    use. The config name should be the name of commons-crypto configuration without the
    commons.crypto prefix.

# Web UI

## Authentication and Authorization

Enabling authentication for the Web UIs is done using [javax servlet filters](https://docs.oracle.com/javaee/6/api/javax/servlet/Filter.html).
You will need a filter that implements the authentication method you want to deploy. Spark does not
provide any built-in authentication filters.

Spark also supports access control to the UI when an authentication filter is present. Each
application can be configured with its own separate access control lists (ACLs). Spark
differentiates between "view" permissions (who is allowed to see the application's UI), and "modify"
permissions (who can do things like kill jobs in a running application).

ACLs can be configured for either users or groups. Configuration entries accept comma-separated
lists as input, meaning multiple users or groups can be given the desired privileges. This can be
used if you run on a shared cluster and have a set of administrators or developers who need to
monitor applications they may not have started themselves. A wildcard (`*`) added to specific ACL
means that all users will have the respective privilege. By default, only the user submitting the
application is added to the ACLs.

Group membership is established by using a configurable group mapping provider. The mapper is
configured using the spark.user.groups.mapping config option, described in the table
below.

The following options control the authentication of Web UIs:

Property Name	Default	Meaning

  spark.ui.filters
  None

    See the Spark UI configuration for how to configure
    filters.

  spark.acls.enable
  false

    Whether UI ACLs should be enabled. If enabled, this checks to see if the user has access
    permissions to view or modify the application. Note this requires the user to be authenticated,
    so if no authentication filter is installed, this option does not do anything.

  spark.admin.acls
  None

    Comma-separated list of users that have view and modify access to the Spark application.

  spark.admin.acls.groups
  None

    Comma-separated list of groups that have view and modify access to the Spark application.

  spark.modify.acls
  None

    Comma-separated list of users that have modify access to the Spark application.

  spark.modify.acls.groups
  None

    Comma-separated list of groups that have modify access to the Spark application.

  spark.ui.view.acls
  None

    Comma-separated list of users that have view access to the Spark application.

  spark.ui.view.acls.groups
  None

    Comma-separated list of groups that have view access to the Spark application.

  spark.user.groups.mapping
  org.apache.spark.security.ShellBasedGroupsMappingProvider

    The list of groups for a user is determined by a group mapping service defined by the trait
    org.apache.spark.security.GroupMappingServiceProvider, which can be configured by
    this property.

By default, a Unix shell-based implementation is used, which collects this information
    from the host OS.

Note: This implementation supports only Unix/Linux-based environments.
    Windows environment is currently not supported. However, a new platform/protocol can
    be supported by implementing the trait mentioned above.

On YARN, the view and modify ACLs are provided to the YARN service when submitting applications, and
control who has the respective privileges via YARN interfaces.

## Spark History Server ACLs

Authentication for the SHS Web UI is enabled the same way as for regular applications, using
servlet filters.

To enable authorization in the SHS, a few extra options are used:

Property Name	Default	Meaning

  spark.history.ui.acls.enable
  false

    Specifies whether ACLs should be checked to authorize users viewing the applications in
    the history server. If enabled, access control checks are performed regardless of what the
    individual applications had set for spark.ui.acls.enable. The application owner
    will always have authorization to view their own application and any users specified via
    spark.ui.view.acls and groups specified via spark.ui.view.acls.groups
    when the application was run will also have authorization to view that application.
    If disabled, no access control checks are made for any application UIs available through
    the history server.

  spark.history.ui.admin.acls
  None

    Comma separated list of users that have view access to all the Spark applications in history
    server.

  spark.history.ui.admin.acls.groups
  None

    Comma separated list of groups that have view access to all the Spark applications in history
    server.

The SHS uses the same options to configure the group mapping provider as regular applications.
In this case, the group mapping provider will apply to all UIs server by the SHS, and individual
application configurations will be ignored.

## SSL Configuration

Configuration for SSL is organized hierarchically. The user can configure the default SSL settings
which will be used for all the supported communication protocols unless they are overwritten by
protocol-specific settings. This way the user can easily provide the common settings for all the
protocols without disabling the ability to configure each one individually. The following table
describes the SSL configuration namespaces:

    Config Namespace
    Component

    spark.ssl

      The default SSL configuration. These values will apply to all namespaces below, unless
      explicitly overridden at the namespace level.

    spark.ssl.ui
    Spark application Web UI

    spark.ssl.standalone
    Standalone Master / Worker Web UI

    spark.ssl.historyServer
    History Server Web UI

The full breakdown of available SSL options can be found below. The `${ns}` placeholder should be
replaced with one of the above namespaces.

Property Name	Default	Meaning

    ${ns}.enabled
    false
    Enables SSL. When enabled, ${ns}.ssl.protocol is required.

    ${ns}.port
    None

      The port where the SSL service will listen on.

The port must be defined within a specific namespace configuration. The default
      namespace is ignored when reading this configuration.

When not set, the SSL port will be derived from the non-SSL port for the
      same service. A value of "0" will make the service bind to an ephemeral port.

    ${ns}.enabledAlgorithms
    None

      A comma-separated list of ciphers. The specified ciphers must be supported by JVM.

The reference list of protocols can be found in the "JSSE Cipher Suite Names" section
      of the Java security guide. The list for Java 8 can be found at
      this
      page.

Note: If not set, the default cipher suite for the JRE will be used.

    ${ns}.keyPassword
    None

      The password to the private key in the key store.

    ${ns}.keyStore
    None

      Path to the key store file. The path can be absolute or relative to the directory in which the
      process is started.

    ${ns}.keyStorePassword
    None
    Password to the key store.

    ${ns}.keyStoreType
    JKS
    The type of the key store.

    ${ns}.protocol
    None

      TLS protocol to use. The protocol must be supported by JVM.

The reference list of protocols can be found in the "Additional JSSE Standard Names"
      section of the Java security guide. For Java 8, the list can be found at
      this
      page.

    ${ns}.needClientAuth
    false
    Whether to require client authentication.

    ${ns}.trustStore
    None

      Path to the trust store file. The path can be absolute or relative to the directory in which
      the process is started.

    ${ns}.trustStorePassword
    None
    Password for the trust store.

    ${ns}.trustStoreType
    JKS
    The type of the trust store.

Spark also supports retrieving `${ns}.keyPassword`, `${ns}.keyStorePassword` and `${ns}.trustStorePassword` from
[Hadoop Credential Providers](https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/CredentialProviderAPI.html).
User could store password into credential file and make it accessible by different components, like:

```
hadoop credential create spark.ssl.keyPassword -value password \
    -provider jceks://hdfs@nn1.example.com:9001/user/backup/ssl.jceks
```

To configure the location of the credential provider, set the `hadoop.security.credential.provider.path`
config option in the Hadoop configuration used by Spark, like:

```
  <property>
    <name>hadoop.security.credential.provider.path</name>
    <value>jceks://hdfs@nn1.example.com:9001/user/backup/ssl.jceks</value>
  </property>
```

Or via SparkConf "spark.hadoop.hadoop.security.credential.provider.path=jceks://hdfs@nn1.example.com:9001/user/backup/ssl.jceks".

## Preparing the key stores

Key stores can be generated by `keytool` program. The reference documentation for this tool for
Java 8 is [here](https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html).
The most basic steps to configure the key stores and the trust store for a Spark Standalone
deployment mode is as follows:

* Generate a key pair for each node
* Export the public key of the key pair to a file on each node
* Import all exported public keys into a single trust store
* Distribute the trust store to the cluster nodes

### YARN mode

To provide a local trust store or key store file to drivers running in cluster mode, they can be
distributed with the application using the `--files` command line argument (or the equivalent
`spark.files` configuration). The files will be placed on the driver's working directory, so the TLS
configuration should just reference the file name with no absolute path.

Distributing local key stores this way may require the files to be staged in HDFS (or other similar
distributed file system used by the cluster), so it's recommended that the underlying file system be
configured with security in mind (e.g. by enabling authentication and wire encryption).

### Standalone mode

The user needs to provide key stores and configuration options for master and workers. They have to
be set by attaching appropriate Java system properties in `SPARK_MASTER_OPTS` and in
`SPARK_WORKER_OPTS` environment variables, or just in `SPARK_DAEMON_JAVA_OPTS`.

The user may allow the executors to use the SSL settings inherited from the worker process. That
can be accomplished by setting `spark.ssl.useNodeLocalConf` to `true`. In that case, the settings
provided by the user on the client side are not used.

### Mesos mode

Mesos 1.3.0 and newer supports `Secrets` primitives as both file-based and environment based
secrets. Spark allows the specification of file-based and environment variable based secrets with
`spark.mesos.driver.secret.filenames` and `spark.mesos.driver.secret.envkeys`, respectively.

Depending on the secret store backend secrets can be passed by reference or by value with the
`spark.mesos.driver.secret.names` and `spark.mesos.driver.secret.values` configuration properties,
respectively.

Reference type secrets are served by the secret store and referred to by name, for example
`/mysecret`. Value type secrets are passed on the command line and translated into their
appropriate files or environment variables.

## HTTP Security Headers

Apache Spark can be configured to include HTTP headers to aid in preventing Cross Site Scripting
(XSS), Cross-Frame Scripting (XFS), MIME-Sniffing, and also to enforce HTTP Strict Transport
Security.

Property Name	Default	Meaning

  spark.ui.xXssProtection
  1; mode=block

    Value for HTTP X-XSS-Protection response header. You can choose appropriate value
    from below:

0 (Disables XSS filtering)

1 (Enables XSS filtering. If a cross-site scripting attack is detected,
        the browser will sanitize the page.)

1; mode=block (Enables XSS filtering. The browser will prevent rendering
        of the page if an attack is detected.)

  spark.ui.xContentTypeOptions.enabled
  true

    When enabled, X-Content-Type-Options HTTP response header will be set to "nosniff".

  spark.ui.strictTransportSecurity
  None

    Value for HTTP Strict Transport Security (HSTS) Response Header. You can choose appropriate
    value from below and set expire-time accordingly. This option is only used when
    SSL/TLS is enabled.

max-age=<expire-time>

max-age=<expire-time>; includeSubDomains

max-age=<expire-time>; preload

# Configuring Ports for Network Security

Generally speaking, a Spark cluster and its services are not deployed on the public internet.
They are generally private services, and should only be accessible within the network of the
organization that deploys Spark. Access to the hosts and ports used by Spark services should
be limited to origin hosts that need to access the services.

Below are the primary ports that Spark uses for its communication and how to
configure those ports.

## Standalone mode only

    From	To	Default Port	Purpose	Configuration
    Setting	Notes

    Browser
    Standalone Master
    8080
    Web UI
    spark.master.ui.port /
 SPARK_MASTER_WEBUI_PORT
    Jetty-based. Standalone mode only.

    Browser
    Standalone Worker
    8081
    Web UI
    spark.worker.ui.port /
 SPARK_WORKER_WEBUI_PORT
    Jetty-based. Standalone mode only.

    Driver /
 Standalone Worker
    Standalone Master
    7077
    Submit job to cluster /
 Join cluster
    SPARK_MASTER_PORT
    Set to "0" to choose a port randomly. Standalone mode only.

    External Service
    Standalone Master
    6066
    Submit job to cluster via REST API
    spark.master.rest.port
    Use spark.master.rest.enabled to enable/disable this service. Standalone mode only.

    Standalone Master
    Standalone Worker
    (random)
    Schedule executors
    SPARK_WORKER_PORT
    Set to "0" to choose a port randomly. Standalone mode only.

## All cluster managers

    From	To	Default Port	Purpose	Configuration
    Setting	Notes

    Browser
    Application
    4040
    Web UI
    spark.ui.port
    Jetty-based

    Browser
    History Server
    18080
    Web UI
    spark.history.ui.port
    Jetty-based

    Executor /
 Standalone Master
    Driver
    (random)
    Connect to application /
 Notify executor state changes
    spark.driver.port
    Set to "0" to choose a port randomly.

    Executor / Driver
    Executor / Driver
    (random)
    Block Manager port
    spark.blockManager.port
    Raw socket via ServerSocketChannel

# Kerberos

Spark supports submitting applications in environments that use Kerberos for authentication.
In most cases, Spark relies on the credentials of the current logged in user when authenticating
to Kerberos-aware services. Such credentials can be obtained by logging in to the configured KDC
with tools like `kinit`.

When talking to Hadoop-based services, Spark needs to obtain delegation tokens so that non-local
processes can authenticate. Spark ships with support for HDFS and other Hadoop file systems, Hive
and HBase.

When using a Hadoop filesystem (such HDFS or WebHDFS), Spark will acquire the relevant tokens
for the service hosting the user's home directory.

An HBase token will be obtained if HBase is in the application's classpath, and the HBase
configuration has Kerberos authentication turned (`hbase.security.authentication=kerberos`).

Similarly, a Hive token will be obtained if Hive is in the classpath, and the configuration includes
URIs for remote metastore services (`hive.metastore.uris` is not empty).

If an application needs to interact with other secure Hadoop filesystems, their URIs need to be
explicitly provided to Spark at launch time. This is done by listing them in the
`spark.kerberos.access.hadoopFileSystems` property, described in the configuration section below.

Spark also supports custom delegation token providers using the Java Services
mechanism (see `java.util.ServiceLoader`). Implementations of
`org.apache.spark.security.HadoopDelegationTokenProvider` can be made available to Spark
by listing their names in the corresponding file in the jar's `META-INF/services` directory.

Delegation token support is currently only supported in YARN and Mesos modes. Consult the
deployment-specific page for more information.

The following options provides finer-grained control for this feature:

Property Name	Default	Meaning

  spark.security.credentials.${service}.enabled
  true

  Controls whether to obtain credentials for services when security is enabled.
  By default, credentials for all supported services are retrieved when those services are
  configured, but it's possible to disable that behavior if it somehow conflicts with the
  application being run.

  spark.kerberos.access.hadoopFileSystems
  (none)

    A comma-separated list of secure Hadoop filesystems your Spark application is going to access. For
    example, spark.kerberos.access.hadoopFileSystems=hdfs://nn1.com:8032,hdfs://nn2.com:8032,
    webhdfs://nn3.com:50070. The Spark application must have access to the filesystems listed
    and Kerberos must be properly configured to be able to access them (either in the same realm
    or in a trusted realm). Spark acquires security tokens for each of the filesystems so that
    the Spark application can access those remote Hadoop filesystems.

## Long-Running Applications

Long-running applications may run into issues if their run time exceeds the maximum delegation
token lifetime configured in services it needs to access.

This feature is not available everywhere. In particular, it's only implemented
on YARN and Kubernetes (both client and cluster modes), and on Mesos when using client mode.

Spark supports automatically creating new tokens for these applications. There are two ways to
enable this functionality.

### Using a Keytab

By providing Spark with a principal and keytab (e.g. using `spark-submit` with `--principal`
and `--keytab` parameters), the application will maintain a valid Kerberos login that can be
used to retrieve delegation tokens indefinitely.

Note that when using a keytab in cluster mode, it will be copied over to the machine running the
Spark driver. In the case of YARN, this means using HDFS as a staging area for the keytab, so it's
strongly recommended that both YARN and HDFS be secured with encryption, at least.

### Using a ticket cache

By setting `spark.kerberos.renewal.credentials` to `ccache` in Spark's configuration, the local
Kerberos ticket cache will be used for authentication. Spark will keep the ticket renewed during its
renewable life, but after it expires a new ticket needs to be acquired (e.g. by running `kinit`).

It's up to the user to maintain an updated ticket cache that Spark can use.

The location of the ticket cache can be customized by setting the `KRB5CCNAME` environment
variable.

## Secure Interaction with Kubernetes

When talking to Hadoop-based services behind Kerberos, it was noted that Spark needs to obtain delegation tokens
so that non-local processes can authenticate. These delegation tokens in Kubernetes are stored in Secrets that are
shared by the Driver and its Executors. As such, there are three ways of submitting a Kerberos job:

In all cases you must define the environment variable: `HADOOP_CONF_DIR` or
`spark.kubernetes.hadoop.configMapName.`

It also important to note that the KDC needs to be visible from inside the containers.

If a user wishes to use a remote HADOOP_CONF directory, that contains the Hadoop configuration files, this could be
achieved by setting `spark.kubernetes.hadoop.configMapName` to a pre-existing ConfigMap.

1. Submitting with a $kinit that stores a TGT in the Local Ticket Cache:
```bash
/usr/bin/kinit -kt <keytab_file> <username>/<krb5 realm>
/opt/spark/bin/spark-submit \
    --deploy-mode cluster \
    --class org.apache.spark.examples.HdfsTest \
    --master k8s://<KUBERNETES_MASTER_ENDPOINT> \
    --conf spark.executor.instances=1 \
    --conf spark.app.name=spark-hdfs \
    --conf spark.kubernetes.container.image=spark:latest \
    --conf spark.kubernetes.kerberos.krb5.path=/etc/krb5.conf \
    local:///opt/spark/examples/jars/spark-examples_<VERSION>.jar \
    <HDFS_FILE_LOCATION>
```
2. Submitting with a local Keytab and Principal
```bash
/opt/spark/bin/spark-submit \
    --deploy-mode cluster \
    --class org.apache.spark.examples.HdfsTest \
    --master k8s://<KUBERNETES_MASTER_ENDPOINT> \
    --conf spark.executor.instances=1 \
    --conf spark.app.name=spark-hdfs \
    --conf spark.kubernetes.container.image=spark:latest \
    --conf spark.kerberos.keytab=<KEYTAB_FILE> \
    --conf spark.kerberos.principal=<PRINCIPAL> \
    --conf spark.kubernetes.kerberos.krb5.path=/etc/krb5.conf \
    local:///opt/spark/examples/jars/spark-examples_<VERSION>.jar \
    <HDFS_FILE_LOCATION>
```

3. Submitting with pre-populated secrets, that contain the Delegation Token, already existing within the namespace
```bash
/opt/spark/bin/spark-submit \
    --deploy-mode cluster \
    --class org.apache.spark.examples.HdfsTest \
    --master k8s://<KUBERNETES_MASTER_ENDPOINT> \
    --conf spark.executor.instances=1 \
    --conf spark.app.name=spark-hdfs \
    --conf spark.kubernetes.container.image=spark:latest \
    --conf spark.kubernetes.kerberos.tokenSecret.name=<SECRET_TOKEN_NAME> \
    --conf spark.kubernetes.kerberos.tokenSecret.itemKey=<SECRET_ITEM_KEY> \
    --conf spark.kubernetes.kerberos.krb5.path=/etc/krb5.conf \
    local:///opt/spark/examples/jars/spark-examples_<VERSION>.jar \
    <HDFS_FILE_LOCATION>
```

3b. Submitting like in (3) however specifying a pre-created krb5 ConfigMap and pre-created `HADOOP_CONF_DIR` ConfigMap
```bash
/opt/spark/bin/spark-submit \
    --deploy-mode cluster \
    --class org.apache.spark.examples.HdfsTest \
    --master k8s://<KUBERNETES_MASTER_ENDPOINT> \
    --conf spark.executor.instances=1 \
    --conf spark.app.name=spark-hdfs \
    --conf spark.kubernetes.container.image=spark:latest \
    --conf spark.kubernetes.kerberos.tokenSecret.name=<SECRET_TOKEN_NAME> \
    --conf spark.kubernetes.kerberos.tokenSecret.itemKey=<SECRET_ITEM_KEY> \
    --conf spark.kubernetes.hadoop.configMapName=<HCONF_CONFIG_MAP_NAME> \
    --conf spark.kubernetes.kerberos.krb5.configMapName=<KRB_CONFIG_MAP_NAME> \
    local:///opt/spark/examples/jars/spark-examples_<VERSION>.jar \
    <HDFS_FILE_LOCATION>
```
# Event Logging

If your applications are using event logging, the directory where the event logs go
(`spark.eventLog.dir`) should be manually created with proper permissions. To secure the log files,
the directory permissions should be set to `drwxrwxrwxt`. The owner and group of the directory
should correspond to the super user who is running the Spark History Server.

This will allow all users to write to the directory but will prevent unprivileged users from
reading, removing or renaming a file unless they own it. The event log files will be created by
Spark with permissions such that only the user and group have read and write access.

# Persisting driver logs in client mode

If your applications persist driver logs in client mode by enabling `spark.driver.log.persistToDfs.enabled`,
the directory where the driver logs go (`spark.driver.log.dfsDir`) should be manually created with proper
permissions. To secure the log files, the directory permissions should be set to `drwxrwxrwxt`. The owner
and group of the directory should correspond to the super user who is running the Spark History Server.

This will allow all users to write to the directory but will prevent unprivileged users from
reading, removing or renaming a file unless they own it. The driver log files will be created by
Spark with permissions such that only the user and group have read and write access.

redpajama_set_name: RedPajamaGithub


The Facet Series is a study of the rough textured nature and beauty of rocks and stones.
Available in sterling silver and sterling silver with brass accents these pieces are a mix of striking texture and minimalism - designed to be worn every day.
The striking Facet Series are available in sterling silver and can be personalised in a black oxidised finish.


The Gift Card is the property of the issuer thereof SUBDUED (AG USA LLC), the identity details of which are distributed with the Card itself, the holder of the Card being a mere depositary. GIFT CARDS MAY ONLY BE PURCHASED IN-STORE AT SUBDUED 416 BROADWAY STREET, SANTA MONICA, CALIFORNIA 90401 ("Store"). The purchase and/or use of the Card entails the full acceptance of these terms and conditions, which have been made available to the customer upon purchase of the Card, and which are also described at www.SUBDUED.com. The price of the Card can be paid by any of the means of payment accepted at the SUBDUED Store. Gift cards shall not be paid by means of another gift card. The Card can be used to purchase any item for sale at the SUBDUED Store. The Card cannot be used in stores of any other country or at the www.SUBDUED.com website. The Card is available in the following format only: Physical Card for sale at the SUBDUED Store. Any outstanding balance of the Card shall not be refunded or exchanged for cash EXCEPT as required by law. The Card can be used as often as the holder thereof would like, until the total amount has been used up. The remaining balance on the Card from time to time available shall be the difference between the remaining balance available prior to the purchase, and the relevant amount used up in such purchase. Where the purchase price is in excess of the remaining balance on the Card, the difference may be paid through any payment means accepted at the SUBDUED Store. The remaining balance on the Card is shown on the cash register receipt every time a purchase is made with the Card, for purchases made at the SUBDUED Store. The remaining balance of the Card may be checked at the SUBDUED Store. Unless evidence is given to the contrary, the balance of the card from time to time remaining shall be the one determined by the cash register used at the SUBDUED Store. Products purchased with the Card at the SUBDUED Store shall be subject to the same exchange and return policy as any other products purchased at said store. Refund methods hereunder provided are an essential term, and are deemed to be expressly accepted upon purchasing and/or using the Card. The Card does not have an expiration date, and shall remain valid until all value stored on the Card is used. The Card is a bearer instrument. Its holder shall be solely responsible for the use and custody of the Card. The Card shall not be replaced in case of theft, loss or damage thereof. However, SUBDUED may replace the Card in case of change of format of the Card. Cards originally obtained through any unlawful means shall be null and void and they shall not be used to purchase products, nor shall the price thereof be refunded. The Gift Card shall not be used for the purposes of advertising or promoting products or services marketed by any third party other that the issuer of the card, unless prior written consent is given by this latter.


text:
Baltimore police chief apologizes, city settles Harlem Park lockdown lawsuit
By: Steve Lash Daily Record Legal Affairs Writer June 29, 2021
"The result was a protracted police presence that was not aligned with any national best practice for investigations nor any true community policing model," wrote Baltimore Police Commissioner Michael Harrison in his apology to Harlem Park residents for a protracted lockdown there after the shooting death of a police detective. (AP Photo/Gerald Herbert, File)
Baltimore's police commissioner has apologized for the department's six-day lockdown of the city's Harlem Park section following a detective's 2017 shooting death, saying the controversial law enforcement action was grossly improper and damaged the public's trust, according to attorneys for four residents of the largely Black neighborhood.
Michael S. Harrison's apology accompanied the city's settlement of a federal lawsuit the four residents filed in November 2019, alleging the Baltimore Police Department violated their constitutional rights against unreasonable searches and seizures as officers routinely stopped them and insisted on proof of residency during the investigation of Sean Suiter's Nov. 15, 2017, shooting and death the following day.
The four residents will be paid $24,000 each under the settlement and the BPD pledged to adopt procedures to prevent a similar lockdown from recurring, the plaintiffs' attorneys stated late Monday afternoon.
"On behalf of the City of Baltimore and the Baltimore Police Department, I would like to express our sincere regret and apology for the disruptive events that you and your family experienced as a result of the prolonged police perimeter in the Harlem Park neighborhood" from Nov. 15 to Nov. 20, 2017, Harrison wrote in the letter released by the plaintiffs.
"Amid the investigation of the tragic death of Detective Sean Suiter, the BPD men and women tasked with maintaining the crime scene perimeter were not guided by adequate supervision to reinforce constitutional requirements for stops and searches," added Harrison, who was neither commissioner nor a Baltimore police officer at the time.
"The result was a protracted police presence that was not aligned with any national best practice for investigations nor any true community policing model," Harrison wrote. "I am deeply saddened and troubled that these events have shaken your faith and trust in the police who are sworn to serve and protect the city's residents, and that you feel a diminished sense of comfort and security, to which all Baltimore City residents are entitled."
The police investigation and alleged constitutional violations occurred when Kevin Davis was commissioner. Multiple investigations have called Suiter's death a suicide.
"We are pleased to have reached a mutually agreeable resolution that supports the rebuilding of trust between BPD and the Harlem Park neighborhood," Baltimore Solicitor James L. "Jim" Shea, the city's chief attorney, said Tuesday.
Under the settlement, the BPD will adopt procedures prohibiting officers from questioning or seeking identification from residents or guests going to or coming from their homes within a crime scene boundary. Officers, however, may escort them to preserve the integrity of the crime scene, according to the plaintiffs' attorneys.
In addition, crime scene boundaries and durations "must be tied to the nature and facts of the crime" and residential searches must be completed within four hours absent extraordinary circumstances.
The American Civil Liberties Union of Maryland and the law firm Crowell & Moring LLP in Washington, who both represented the plaintiffs, hailed the settlement.
"What happened in Harlem Park needed to be challenged," David Rocah, senior attorney with the ACLU of Maryland, said in a statement announcing the settlement. "It was a flagrant violation of law, and it is not enough for the city to say, 'Whoops, our bad, we'll do better next time."
Dan Wolff, a partner at Crowell & Moring, called the settlement "an important vindication of rights" for all Harlem Park residents.
According to the now-settled lawsuit, police locked down a six-square-block area in the community where Suiter was fatally shot and subjected all residents to stops and questioning. People needed permission to enter and leave their homes, nonresidents were not allowed inside the area and officers generally required people to show identification and questioned them about their identities and movements, stated the complaint filed in U.S. District Court in Baltimore.
One of the plaintiffs, resident Lauren Holmes, claimed she was returning to her home the night of Suiter's shooting and was stopped on her way by police who demanded proof she lived there. Holmes said she was unable to take her children to school the next day because police in front of her house would not let her leave.
Nicole Lee, another plaintiff, claimed she had trouble returning to the neighborhood the night of the shooting and her son's bus could not bring him home from his after-school program for students with autism. He had been returned to his school and a family member took him to a friend's home outside Harlem Park for the night, according to the complaint.
Juaqueta Bullock said she was at her daughter's track practice when the shooting occurred and the two were stopped from going home and forced to wait outside the cordon for more than an hour before an officer escorted them home. Police also stopped them when they were leaving and returning to the neighborhood in the ensuing days, the complaint stated.
Luella Lawson said she was home with her daughter and grandchildren when Suiter was shot and was prevented from leaving by police. Lawson was stopped when she attempted to go to work the next morning and was offended when she learned police had done a "warrant check" on her, according to the complaint.
The case is docketed in U.S. District Court as Lauren Holmes et al. v. Baltimore City Police Department et al., 1:19-cv-03392-RDB.
Baltimore Police Department Crowell and Moring fourth amendment lockdown Michael Harrison Sean Suiter Search and seizure 10:47 am Tue, June 29, 2021 Maryland Daily Record
Steve Lash
Tagged with: Baltimore Police Department Crowell and Moring fourth amendment lockdown Michael Harrison Sean Suiter Search and seizure
To purchase a reprint of this article, contact [email protected].
Latest Opinions
IN THE MATTER OF PARVIZ IZADJOO
IN RE GREEN THUMB INDUSTRIES, INC., ET AL.
PLAZA HAND CAR WASH, INC., ET AL. v. KERRY ANDERSON
FRANKLIN JOSE RODRIGUEZ GUTIERREZ v. STATE OF MARYLAND
XAVIER DAMON BYRD v. STATE OF MARYLAND
Browse industry reports in the special publications digital edition archive.
More Law News
Justice Kavanaugh: Supreme Court's slow start a coincidence
by Associated Press | Jan. 27
Colorado baker loses appeal over transgender birthday cake case
Baltimore police using less force amid ongoing reform effort
5 Memphis cops charged with being 'all responsible' for Tyre Nichols' death
Find out what attorneys think of the economics of the business in our Maryland Lawyers Confidence Index
Find a legal job in our classified ads
Get assistance for your case with litigation support
Read lawyer-to-lawyer referrals
Submit a verdict or settlement
See digested appellate court opinions in Law Digest
The Daily Record's law blog
Just how happy are lawyers?

redpajama_set_name: RedPajamaCommonCrawl


To request a press kit, please contact us.
For selected press quotes, please click here.
Audio: Please click on the photo to the right to hear Michael Brookes (in foreground of photo) speak to WNYC's Brian Lehrer about his experience as a member of the Brooklyn Parkinson Group taking Dance for PD classes at the Mark Morris Dance Center.


I downloaded the Nightmare House 2 mod from Desura. Everything seemed to download and install just fine, but everytime I try to run the game via the Steam client it crashes. I get through the We Create Stuff logo and the Nightmare House 2 logo, but once the title screen begins to load the game crashes and I get an error message.
I attached a screen capture of the error message.
Can any one help find the root of this problem and get the game working right?
Getting the same error for Nightmare House 2, as well as Hellsound Dreams. These are the only two mods I cannot get to work since whatever Steam did when they updated.
I only think you need: Half Life 2: Episode Two and the free tool Source SDK Base 2007 which can be downloaded through steam.
You still won't be able to play the game since there are more crashes up ahead.
Yes there are two crashes, one when you first get a gun and the second is at the end off the game.
You will also have errors in materials and models, at least I had.
I found solutions for the first crash and the missing materials and models.
Haven´t solved the second crash so if any of you solves it, please reply here.


That it was blown up into a "war" between "Hamilton" and Actors' Equity Association… was mostly an unfortunate byproduct of the informational echo chamber in which we live. As the President of Actors' Equity, I can unequivocally state not only that we are ready to move on, but also that our industry desperately needs for us to do so.
If we are going to increase diversity among performers, we also have to produce more plays and musicals that tell the stories of traditionally underrepresented communities.
There is absolutely no reason why, in the vast majority of cases, traditionally underrepresented actors cannot play white characters — or even better, play characters whose race is absolutely irrelevant to the story being told.
Her latter emphasized point, that perhaps race needn't inform every character in every story, is similar to one that Footlights' columnist, Kevin Delin, made just a few days ago.


text:
Developers
==========
Hello, if anyone interested to contribute OWASP Nettacker Project, we gladly support and appreciate that! Please take a look at [Developers Document](https://github.com/zdresearch/OWASP-Nettacker/wiki/Developers) on wiki page and let me know if you have more questions.


text:
<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wikidot="http://www.wikidot.com/rss-namespace">

	<channel>
		<title>Done, thank you.</title>
		<link>http://bvs.wikidot.com/forum/t-252310/done-thank-you</link>
		<description>Posts in the discussion thread "Done, thank you."</description>
				<copyright></copyright>
		<lastBuildDate>Sun, 10 Jul 2022 05:01:42 +0000</lastBuildDate>

					<item>
				<guid>http://bvs.wikidot.com/forum/t-252310#post-839625</guid>
				<title>Re: Need np bingo, tier 3 village.</title>
				<link>http://bvs.wikidot.com/forum/t-252310/done-thank-you#post-839625</link>
				<description></description>
				<pubDate>Fri, 30 Jul 2010 10:40:06 +0000</pubDate>
				<wikidot:authorName>Arekanderu</wikidot:authorName>				<wikidot:authorUserId>174498</wikidot:authorUserId>				<content:encoded>
					<![CDATA[

Bump

				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://bvs.wikidot.com/forum/t-252310#post-835204</guid>
				<title>Re: Need np bingo, tier 3 village.</title>
				<link>http://bvs.wikidot.com/forum/t-252310/done-thank-you#post-835204</link>
				<description></description>
				<pubDate>Fri, 23 Jul 2010 13:10:40 +0000</pubDate>
				<wikidot:authorName>Arekanderu</wikidot:authorName>				<wikidot:authorUserId>174498</wikidot:authorUserId>				<content:encoded>
					<![CDATA[

Bump.
 I'm still in need of a bingo. Please help, will return the favor.

				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://bvs.wikidot.com/forum/t-252310#post-824944</guid>
				<title>Need np bingo, tier 3 village.</title>
				<link>http://bvs.wikidot.com/forum/t-252310/done-thank-you#post-824944</link>
				<description></description>
				<pubDate>Thu, 08 Jul 2010 11:30:42 +0000</pubDate>
				<wikidot:authorName>Arekanderu</wikidot:authorName>				<wikidot:authorUserId>174498</wikidot:authorUserId>				<content:encoded>
					<![CDATA[

Name: Arekanderu
 Village: Wiki Redux

Will return the favor.

				 	]]>
				</content:encoded>							</item>
				</channel>
</rss>


text:
TROVELINK
TROVELINK Trademark Information
Trademark by Earnity Inc.
Platform as a service (PAAS) featuring computer software platforms for buying, selling, trading, and transferring digital assets; Providing a web site featuring technology that enables users to buy, sell, trade, and transfer digital assets; Software as a service (SAAS) services featuring software for buying, selling, trading, and transferring digital assets
platform service paas featuring software platforms buying selling trading transferring digital assets providing web site featuring technology enables users buy sell
This is a brand page for the TROVELINK trademark by Earnity Inc. in *********, **********, ***** ****.
Write a review about a product or service associated with this TROVELINK trademark. Or, contact the owner Earnity Inc. of the TROVELINK trademark by filing a request to communicate with the Legal Correspondent for licensing, use, and/or questions related to the TROVELINK trademark.
On Thursday, September 2, 2021, a U.S. federal trademark registration was filed for TROVELINK. The USPTO has given the TROVELINK trademark serial number of 97009418. The current federal status of this trademark filing is ABANDONED - FAILURE TO RESPOND OR LATE RESPONSE. The correspondent listed for TROVELINK is Connie L. Ellerbach of ********,********, ***** **** . The TROVELINK trademark is filed in the category of Computer & Software Services & Scientific Services . The description provided to the USPTO for TROVELINK is Platform as a service (PAAS) featuring computer software platforms for buying, selling, trading, and transferring digital assets; Providing a web site featuring technology that enables users to buy, sell, trade, and transfer digital assets; Software as a service (SAAS) services featuring software for buying, selling, trading, and transferring digital assets.
Word mark: TROVELINK
Goods and Services: Platform as a service (PAAS) featuring computer software platforms for buying, selling, trading, and transferring digital assets; Providing a web site featuring technology that enables users to buy, sell, trade, and transfer digital assets; Software as a service (SAAS) services featuring software for buying, selling, trading, and transferring digital assets
Earnity Inc.
Connie L. Ellerbach
Trademarkia-Network law firms can help you incorporate a business around your TROVELINK trademark in less than 5 minutes. Trademarkia makes the process easy and convenient, so start now!
Connie L. Ellerbach is a correspondent of TROVELINK trademark.
Please Rate and Review for TROVELINK
TROVELINK is providing Platform as a service (PAAS) featuring computer software platforms for buying, selling, trading, and transferring digital assets; Providing a web site featuring technology that enables users to buy, sell, trade, and transfer digital assets; Software as a service (SAAS) services featuring software for buying, selling, trading, and transferring digital assets.


text:
On this day in 1904 a woman is arrested for smoking a cigarette in NYC….just think if that was to go before the newest SCOTUS nominee…..
Now for the heart of this post…..
I have been writing about the suicide rate among our military people since the very beginning of this blog……..a story that does not get much play in this minute by minute reporting of the 24 hour news cycle….
Just last week even more bad news has been released about the steep rise in the suicides within our military…..
Military suicides have increased by as much as 20% this year compared to the same period in 2019, and some incidents of violent behavior have spiked as service members struggle under COVID-19, war-zone deployments, national disasters, and civil unrest. While the data is incomplete and causes of suicide are complex, Army and Air Force officials say they believe the pandemic is adding stress to an already-strained force. And senior Army leaders—who say they've seen about a 30% jump in active duty suicides so far this year—said they are looking at shortening combat deployments, the AP reports; soldiers; 10-month deployments have been stretched to 11 months because of the two-week coronavirus quarantines at the beginning and end.
Such a move would be part of a broader effort to make the well-being of soldiers and their families the Army's top priority. The Pentagon refused to provide 2020 data or discuss the issue, but Army officials said Defense Department briefings indicate there has been up to a 20% jump in overall military suicides this year. The Army Guard is up about 10%, from 78 to 86. The Navy total is believed to be lower this year. Pointing to increases in Army suicides, murders, and other violent behavior, Army Secretary Ryan McCarthy said: "We cannot say definitively it is because of COVID. But there is a direct correlation from when COVID started, the numbers actually went up." When calling the National Suicide Prevention Lifeline, 800-273-8255, military veterans should press 1. They also can go to woundedwarriorproject.org, or call the project at 888-997-2586.
I think that zeroing in on the virus as a cause is a bit wrong……the virus is a convenient excuse and gives them an out to explain the rise in the deaths of service people.
I believe that a deep examination needsw to be had and as far as "doing all" to help prevent these deaths is the same thing they say every time and so far these "attempts" have failed.
Maybe it is time for a new approach.
By loboteroin Health Care, Military, Observations, Society 28 September 2020 436 Words2 Comments
To Make SCOTUS Better?
I have written my thoughts on how I believe SCOTUS could be improved after the death of Ginsburg and the fight that is about to erupt……https://lobotero.com/2020/09/23/dems-need-to-buck-up/ and my plan for the court…..https://lobotero.com/2020/09/25/i-have-lots-to-say-about-scotus/
The Dems are thinking ahead and have apparently been reading IST (JK) for they will offer a new plan for the highest court this week……
Under a bill House Democrats are preparing, Ruth Bader Ginsburg would have had to retire in 2011—and William O. Douglas, the longest-serving justice in Supreme Court history, would have stepped down in 1957 instead of 1975. The bill, which Democrats plan to introduce next week, limits the terms of Supreme Court justices to 18 years. It excludes those currently on the court, who were appointed to lifetime terms, Reuters reports. Democratic Rep. Ro Khanna says it "would save the country a lot of agony and help lower the temperature over fights for the court that go to the fault lines of cultural issues." Recent polls have shown large majorities in favor of introducing term limits, which are already required on the Supreme Courts of every state except Rhode Island.
The bill would allow each president to nominate two justices per four-year term. After their terms expired, justice would became "senior" and would be allowed to return to service on lower courts, as numerous former SCOTUS justices have done, including David Souter. This would allow term limits to be introduced without changing the Constitution, writes Gabe Roth In a USA Today op-ed. Roth is executive director of the nonpartisan Fix the Court group. While Democrats probably won't be able to stop President Trump nominating a replacement for Ginsburg, "they can join with their conservative colleagues who have long embraced the concept of term limits and ensure that never again will a superannuated bench determine the direction of our country," he writes.
Rep. Khanna has a bill that could do the trick….
"No justice should feel the weight of an entire country on their shoulders," Khanna added. "No president should be able to shift the ideology of our highest judicial body by mere chance. Most importantly, our country's top constitutional questions shouldn't be decided by a panel of jurists who are biding their time until a president of their choice is elected. It's time to standardize and democratize the Supreme Court."
https://www.commondreams.org/news/2020/09/25/time-standardize-and-democratize-supreme-court-ro-khanna-introduces-bill-justice
I like the idea that the Constitution does not needed amending…that process takes so long that my grandchildren will have grandchildren before it is decided…..look at the Equal Rights Amendment written in 1972 and still has not been ratified a half a century later.
By loboteroin Government, News, Public Policy 28 September 2020 453 Words6 Comments
Tale Of The Taxes
This is for all those people that have been working tirelessly to get Trump's tax returns to made public…..well sports fans your wait is over.
Praise be!
After 3+ years of bitching and whining we all get a chance to look into the taxes of our Dear Loving President…..the returns have been made public…..and now we can go to the tale of the taxes…
The most sought-after documents in America have finally surfaced: President Trump's tax returns. And what they reveal is sobering. Trump, a self-described master of the deal, appears to be taking in hundreds of millions of dollars a year while suffering huge losses that he uses to pay little or nothing in taxes, the New York Times reports. His properties are struggling, he's deeply in debt, and he's facing a battle with the IRS could cost him over $100 million. The 20-plus years of documents "reveal the hollowness, but also the wizardry, behind the self-made-billionaire image," says the Times. "Ultimately, Mr. Trump has been more successful playing a business mogul than being one in real life." Among the details:
Trump paid no federal income taxes in 10 of the last 15 years, $750 the year he won the election, and $750 the year after that.
He's facing $421 million in loans and other debts for which he's personally responsible—most of which will come due over the next four years. If he wins in November, lenders will face the unenviable decision of whether to foreclose on a sitting president. But Trump can use that debt to declare future losses and avoid paying taxes.
Beginning in 2010, he successfully claimed an income tax refund of $72.9 million due to his vast losses. That refund is at the heart of an IRS audit fight that could force Trump to repay the refund with interest—possibly more than $100 million.
Most of Trump's key ventures, like his golf courses and Washington hotel, are losing millions of dollars annually. The properties are also magnets for foreign officials and lobbyists, which could represent a conflict of interest for a president who refused to divest himself from his enterprises while in office.
Trump's revenue from licensing deals and The Apprentice—over $420 million in all—is running out, and years ago he sold off stocks that might help him shore up his properties.
Alan Garten, a Trump Organization lawyer, tells the Times that "most, if not all, of the facts appear to be inaccurate" in its report. He says Trump "has paid tens of millions of dollars in personal taxes" over the past decade, but the Times suggests that Garten is confusing Trump's income taxes with other federal taxes, like Medicare and Social Security. Garten said Trump paid some taxes with credits, which the Times calls "misleading."
Trump called the Times report "fake news" on Sunday and said he has paid taxes, the AP reports. He didn't give details but said it "will all be revealed."
Our fascination even obsession over the Trump taxes has now been satisfied….may we please move on to more pressing issues?
By loboteroin News, Politics, Society, Taxation 28 September 2020 515 Words14 Comments
Sino-Iranian Agreement
While the US is playing silly games with Iran like our newest attempt….
the Trump administration announced new sanctions on Iran under the guise of enforcing stipulations of the 2015 nuclear deal, an agreement the US withdrew from in 2018. The US is taking these measures unilaterally, with virtually no international support. The move is not only rejected by the UN Security Council but also by key European allies like the UK, Germany, and France.
President Trump signed an executive order on Monday that is meant to replace a UN arms embargo on Iran that will expire in October. The executive order allows the US to impose sanctions on any individual or entity that sells weapons to Iran.
Announcing the new measures, Secretary of State Mike Pompeo insisted on calling the new sanctions "UN sanctions," even though a US bid to extend the embargo failed miserably in the UN Security Council. "The President's executive order announced today gives us a new and powerful tool to enforce the UN arms embargo and hold those who seek to evade UN sanctions accountable," Pompeo said.
Like I said silly games……
While the idiots in our foreign policy machine are thumping their chests like sex crazed primates the Chinese have entered into an agreement with the government of Iran…..
Rouhani government must show some achievements after more than seven years of office and the Sino-Iranian agreement might be a way for them to say to its people to just wait a little bit more because things will get better. And things in Iran may indeed be better, as the leaked information reveals that one of the terms of the agreement stipulates a Chinese investment of almost $ 400 billion in the oil, gas and petrochemical industries in Iran. Despite this, the deal is so controversial that even some of Iran's politicians and government media have criticized it. For example, a headline in the newspaper Arman Melli claims that Iran is not Sri Lanka, while an article in the newspaper Hamdeli daily asked whether Iran will become a Chinese colony.
The agreement would vastly expand Chinese presence in banking, telecommunications, ports, railways and dozens of other projects in Iran. In exchange, China would receive a regular and heavily discounted supply of Iranian oil over the next 25 years. Furthermore, it will deepen the military cooperation, and even potentially giving China a foothold in a region that has been a strategic preoccupation of the US for the last decades, which holds a major naval basis there. It is not a new phenomenon and, for example, in December 2019 the two sides together with Russia conducted a four-day joint naval exercises in the Indian Ocean and the Gulf of Oman. And almost 10 years ago the Major General Zhang Zhaozhong commented that China will not hesitate to protect Iran even with a third world war.
Opinion – The Sino-Iran 25 Years Agreement: Why, and Why Now?
So while the US is strutting around like a dickless rooster ….China is expanding its economic base….something Trump has been promising since 2016 and as of yet we have NOT seen any success.
The US needs to learn the fine art of diplomacy again….in the last 3 years it has been replaced with mindless promises and lies.
Maybe the next generation can learn from our mistakes because we are not learning a goddamn thing.
Why do I say the "next generation"?
This agreement is a 25 year plan…..maybe by then the idotsi will no longer be in control.
By loboteroin International Situations, Observations, Professor's Classroom, Trade 28 September 2020 628 Words4 Comments


text:
Our supporters make it possible to fulfill our mission of opening doors to the future by maximizing the potential of children and families. Together, we are making a positive difference in the lives of 7,000 children and 4,500 families every year. Here are some of our proudest success stories, all made possible because of you:
Shannon contacted the North Crisis Nursery the day she left a violent relationship. The mother of two young girls, Alyssa and Aniya, Shannon was 8 months pregnant. She was staying in an emergency shelter with her daughters and felt completely overwhelmed trying to cope with the aftermath of her traumatic experience. To make matters worse, she had a history of drug abuse and suffered from Bipolar Disorder, depression and anxiety. She risked relapsing and losing her children if she didn't find help soon . . .READ MORE
With five beautiful children living in a South Sacramento apartment complex, no transportation, and a language barrier, one could see how easy it would be for Camila to isolate herself, buried by the burdens of life's hardships. Then, she participated in a pilot English as a Second Language Class through the Meadowview Family Resource Center. She eagerly walked to class each week with two twins in tow. Not only did her English skills improve, but she found a community in the class. . . READ MORE
Megan was living in fear. She had been robbed at gun point by three men, who later began stalking and harassing her. Eventually, their harassment turned to violence. Authorities advised Megan not to return home till their investigation was complete. With no family in the area, and no friends who could take her in, Megan didn't know what to do. More than anything, she just wanted to know her 9-month old daughter, Sandy, was safe. Thankfully, the Crisis Nursery was there to help Megan and give Sandy a safe, nurturing place to stay. . . READ MORE
Maya came to the SCH Counseling Center in first grade. She was a smart, sweet young girl, but she was so anxious about talking in front of anyone else, she communicated with her peers and her teacher only through nonverbal actions. As Maya entered second grade, her anxiety was still severe, so her Counselor created a new plan of action. She began meeting with Maya at school so that she could practice talking in the place that was scariest for her. This small change made a big difference, and eventually, Maya was able to talk to her teacher and play with her peers without fear . . . READ MORE
Kelly was a single mother with seven young children. She loved her children, but she had neither the knowledge nor the support system necessary to effectively care for them. Kelly had not worked in 10 years. She struggled to live independently, frequently bouncing from house to house, never finding stable place to call home. Kelly was overwhelmed. With so many worries, she just couldn't enjoy being a parent. Home Visitation Services through the North Sacramento Family Resource Center helped her create a better life for herself and her family. . . READ MORE
Children in our Residential Treatment Program often have difficulty interacting with others. Fred was no exception. When he began living in the East Cowell Center Cottage, he kept to himself, always choosing solitary activities over opportunities for interaction with his peers. Residential Program staff assigned a Recreation Therapy Intern to work with Fred. With time, patience, and persistence, Fred gained an interest in group activities and learned to engage and have fun with other children . . . READ MORE
Christopher had bounced from foster home to foster home, and in the span of two years had attended five different schools. He was frustrated, angry, and disconnected. Although Christopher was in 8th grade when he came to SCH, he was barely reading at a 6th grade level, and his math comprehension was at a 5th grade level. With support and guidance from his education liaison, Christopher made remarkable process. As his attendance and homework completion improved, so did his grades. For Christopher, academics transformed from a source of stress to a point of pride . . . READ MORE
Steven had a history of negative behavior including anger, threatening others, depression, anxiety, and self-harm. With help from Wraparound staff, Steven focused on improving his behavior, social skills, and school achievement. He showed great improvement and was ready to transition out of group care to a family home. His Wrap team located a foster father, David, who turned out to be a perfect match for Steven. Their visits got longer and longer until, finally, Steven was ready to move in. With continued support, he enjoyed a smooth transition to his new home . . . READ MORE
Sara was an 18 year old single mother. A history of emotional, physical and sexual abuse during her childhood resulted in depression and anxiety. She turned to drug and alcohol abuse to cope and struggled to care for herself or her infant son. When a doctor diagnosed that her Alopecia (hair loss) was a result of extreme stress, he encouraged her to seek help. Through intensive psychoeducation and support from staff in the Transition Age Program, Sara made genuine progress. She was well on her way toward a better life for herself and her son . . . READ MORE
Christine was a fifth grade student in eVIBE's Stop and Think Program. Her father had passed away when she was very young, and a new father figure had recently come into her life. She feared connecting with him might cause her to forget her biological father, which resulted in animosity and anger. Stop and Think taught Christine to identify her feelings and manage them in a healthy, positive way. Christine requested a meeting with her Skills Trainer to thank her for being so helpful and caring, and to explain what a difference the program had made in her life . . . READ MORE
Each year, the Sacramento Children's Home takes residents on a holiday trip to the snow. On a previous trip, "James," who often does not like social functions, said he thought it would be "a stupid trip," and only agreed to go after a great deal of encouragement from his treatment team. Upon arriving at Mt. Shasta, his attitude changed. For two and a half days, he and the other boys went bowling, to the movies, and out to dinner, and of course, they played in the snow. They all beamed, but James more than most. He was building fond holiday memories to last a lifetime . . . READ MORE
*Names have been changed to protect the identities of our clients.
Help a Child Today
Get involved and make a big difference in a child's life.
Make a Donation Give In-Kind Items Volunteer
For more information, contact the Philanthropy Department at
Thanks to the generosity of our supporters, the Sacramento Children's Home is able to make a difference in the lives of 7,000 children and 4,500 families each year.


Or if the website goes offline, have a peek at the flash animation itself that I cached from the official website onto my web server.
This entry was posted in Uncategorized and tagged Advertising, Android, Flash, google, Vodafone, YouTube by Sushant Verma. Bookmark the permalink.


Every month in Carpfeed magazine we print our top 50 catches, made up of reports submitted to us and Angling Times in the previous month.
You don't have to be Terry Hearn or bagging huge fish every week to win prizes – we award Sticky bait bundles to our overall top catch, the best looker and a special Carpfeed choice.
Catch of the month wins 10kg of Manilla boilies and two pots of pop-ups, while the other two awards get 5kg of Manilla boilies.
Our Carpfeed Choice award goes to the unstoppable Jack Keating who banked the much-sought-after Triple Row from Dinton at 47lb 10oz.
Our Best Looker award couldn't have gone anywhere other than this. Just look at Ben Samari's Girton beauty!
The best looking fish of the year so far?


text:
Home 2020 Albania: Arilena Ara's Eurovision 2020 entry to be called "Fall from the Sky"
2020 Albania Announcements Breaking News General Latest News
Albania: Arilena Ara's Eurovision 2020 entry to be called "Fall from the Sky"
By James Maude
Albania's representative for Eurovision 2020, Arilena Ara, announced on her social media that her entry will not be called "Shaj," but will be called "Fall from the Sky" instead.
After winning Festivali i Këngës 58 with "Shaj" on December 22, 2019, Ara had mentioned that the lyrics were originally in English, but were translated into Albanian for the national selection. It appears from her social media post, that her entry may be entered into Eurovision in English, the first Albanian entry to do so since Lindita's "World" at Eurovision 2017.
"Fall From The Sky"@Eurovision pic.twitter.com/V2kijLhwcC
— Arilena Ara (@Arilena_Ara) March 8, 2020
Written by renowned songwriters Darko Dimitrov (who co-wrote North Macedonian Tamara Todevska's 5th placed but jury winning Eurovision 2019 entry "Proud") and Lazar Cvetkovski (who co-wrote North Macedonian Mila Moskov's 6th placed Junior Eurovision 2019 entry "Fire), with lyrics by Lindon Berisha, "Shaj" won FiK 58 by securing first place among the two Albanian judges. But with 2nd place and Eurovision fan favorite Elvana Gjata winning the foreign judges, Ara received a lot of online negativity, to the point where many called out fans for their toxic behavior (including our very own Co-founder and Editor-in-Chief Sean Tarbuck).
With the deadline for entries here today, the release of "Fall from the Sky" is imminent, though it remains to be seen that the whole entry is in English. However, based on Ara's past statements about the composition of the entry and the naming of the song title today, it seems a fair bet Ara will be performing in English.
Since their debut in 2004, Albania has been a cult favorite at Eurovision, mostly due to their first on the calendar national selection and strong entries over the years. To date, Rona Nishliu's "Suus" at Eurovision 2012 is Albania's highest placement, with only their debut Anjeza Shahini's "The Image of You" being the other Albanian entry to crack the Top Ten.
Arilena Ara's "Fall from the Sky" is scheduled to be performed in the second half of Semi-Final 2 on May 14, 2020.
What do #YOU think of Ara potentially performing "Fall from the Sky" in English? Let us know in the comments, on social media, or in our forum.
TagsArilena AraDarko DimitrovLazar Cvetkovski
Previous article Team Reviews: Our Thoughts on San Marino
Next article Malta Calling: Destiny's song "All Of My Love" has been released!
Born in Yorkshire, raised in South Africa, polished in Pittsburgh, and a resident of Los Angeles, James Maude is an economist and data analyst with some side action in Eurovision, Leeds United, The Real Housewives, and death metal. When not discussing Ezgjan Alioski, Luann de Lesseps, and Cryptopsy's "None So Vile," James spends his time trying to connect all of the above to Eurovision, whether it be a producer, performer, or bin man. And in Eurovision's rich history, many connections can be made and many compelling stories can be told.
More By James Maude
ESC United "Expert" Panel 2020 – Albania
Eurovision 2020 may not be going ahead like we hoped for, but our "Expert" Pan…
Latvia wins Round 2 of ESC United's Forum Ranking Game
The second round of our annual Forum Ranking Game has concluded following the deadline for…
National finals and the dark side of the Eurofanbase
Disclaimer: This editorial is written from the opinion of the author and does not necessar…
Blåsemafian through to Melodi Grand Prix Final, KEiiNO & TIX showcase their pre-qualified entries
Brass trio Blåsemafian and Hazel won Melodi Grand Prix 2021 Semi-Final 1 and will progress…
Fado legend Carlos do Carmo passes away at age 81
2021 is barely out of the gates and Eurovision fans have already lost one of the icons of …
Load More By James Maude


boomkat writes: Dadaist poetry and music from German artist Ana Berkenhoff and ONO capo Michael Holland of Islington Mill, Salford. In tribute to Kurt Schwitters – a core influence on the ONO label – Ana riffs on his parody of a love poem, 'An Anna Blume' set to wobbly lower case electronics in six parts. Between them, they blur the lines between poetry and tone poem, with Manchester's answer to Peter Pan coaxing out a gauzy spectrum of eccentric small sounds, looped beats and radiophonic quarks matched for quirkiness by Ana's contributions; from glossolalic rambles to English translations of the Schwitters' text, because "it is unbearably cheesy in my mother tongue…" according to the artist herself.
Piccadilly records write: Put simply, Ono is the North West's and possibly England's greatest DIY label/art project and without it, it could be argued, the world would be a much more miserable place! Anyway, with great excitement I glanced at the latest release: sounding a little like an Eccentronic Research Council meets Raymond Scott's Mahattan Research Inc meets Cluster, this is a collection of poetry, electronics and improvisation woven together like a tapestry and drawing you in like a tense but beautifully shot thriller. Clangers-esque theremin sine tones, ethnic percussion, multi-lingual poetry, mangled strings – a plethora of idents from an all manner of subversive stylings. Recorded over many days March – April 2015 W/ Roland 303 Groovebox, Zoom H4 Fostex 160 Multitracker, Samplr, Trichord, Plumbutter, Steel on Foam and Littlebits. This is brilliant!
Andreas Tobler, Chur, 2013 : Und damit begebe ich mich auf einen Trip durch die verschiedenen Räume, in denen man als Besucher wiederholt in kafkaeske Situationen versetzt wird. Nichts ist sicher. Noch nicht mal die eigene Identität, die sich aufzulösen beginnt, wenn man in einem der Räume einer schnurrbärtigen Frau gegenüber sitzt, die unserer beiden Gesichter in der spiegelnden Scheibe zwischen uns übereinanderschiebt. Später wird die Schnurrbärtige mich fragen, ob ich denn öfters an Orte gehe, ohne zu wissen, was mich dort erwartet. Ja!


text:
Mount Robson Marathon
Valemount, Canada
11 Sep 2021 (Sat)
50km, 21,10km, 5km, 12km
Join Mount Robson Marathon
Feel that even breathing and your heart start to pound. Runners line up annually for the Mount Robson Marathon— an impressive feat that takes athletes along a 44 km (27 mi) out-and-back route along the world-famous Berg Lake Trail. You'll climb 825m (2,706 ft) over the first 21 km (13 mi) to the turn around point, and you'll be greeted by spectacular views all along the way.
Valemount is the nearest community to Mount Robson Provincial Park. Nestled in a valley between three spectacular mountain ranges – the Cariboo Mountains to the west, the Monashee Mountains to the south and the Rocky Mountains to the east and north – Valemount is the proud host of the Mount Robson Marathon.
The half marathon takes racers along the Robson River to the shores of Kinney Lake. The turn-around point is on a broad outflow plain below the towering slopes of Mount Robson. Although runners will be halfway to Berg Lake, they will encounter less than 1/4 of the elevation gain of the full marathoners.
The half marathon has an elevation gain of about 180m/600ft over the 10.55km distance to the turn-around point. Most of the elevation gain is spread evenly along the 4km between the Berg Lake Trailhead and Kinney Lake. There are only two short sections (perhaps 200m each) of what could be considered steep uphill.
The Berg Lake Trail is the most heavily used backcountry trail in the Canadian Rockies, with over 2,000 overnight users each year. The trail is very well maintained, and is mostly hardpacked ground with very few exposed roots or protruding rocks.
Mount Robson Provincial Park, the second oldest park in British Columbia's park system, is truly one of the world's crown jewels. The mountain for which the park is named guards the park's western entrance.
At 3,954 meters, Mount Robson, the highest peak in the Canadian Rockies, towers over the lesser surrounding peaks; winter or summer, this is one of the finest views in the Rocky Mountains. Just as the early trappers, hunters and explorers felt in awe at the mountain's magnificence, travelers today experience the same feelings.
Start at Mount Robson Visitor Centre. 2km flat paved road to Berg Lake trailhead (aid station, 15m elevation gain in 2km). Mostly gradual climb along Robson River through cedar rain forest to Kinney Lake picnic area (aid station, 160m elevation gain in 4km). Short up and down section followed by a flat section along the shore of Kinney Lake to Kinney Lake campground (aid station, no elevation gain in 3km). Gentle incline through coniferous forest onto the gravel flats of the Robson River where the half marathoners turn around ( 20m elevation gain in 1.25km).


Published 04/18/2019 02:48:34 pm at 04/18/2019 02:48:34 pm in On Off Switch Box.
on off switch box 6v cr2032 battery box with onoff switch small scale lights by js miniatures hold x battery holder box diy case with on off switch usb dc.
magnetic electric motor starter control hp single phase v magnetic electric motor starter control hp single phase v a with onoff switch box motor protection amazoncom, ols pszaccepss onoff switch port cigar lighter outlet box ols pszaccepss onoff switch port cigar lighter outlet box, kiwarm high quality onoff power switch box push button switch for kiwarm high quality onoff power switch box push button switch for industrial sewing machine, grundfos sqflex io onoff switch box generator interface grundfos sqflex io onoff switch box generator interface , push button switch electric power control box kh phase self push button switch electric power control box kh phase self locking on off, pcs x r button coin cell battery holder case box wonoff pcs x r button coin cell battery holder case box wonoff, siemens ldc onoff switch ldc new no box mara industrial siemens ldc onoff switch ldc new no box, dual onoff switch with stainless steel front faceplate and gang box dual onoff switch with stainless steel front faceplate and gang box, amazoncom onoff power switch box with cord for industrial sewing onoff power switch box with cord for industrial sewing machines volt, rvl onoff momentarypattern switch box , infratech simple onoff switches model simple onoff switch infratech simple onoff switch with weatherproof box for surface mount installation.


Here is the first video of unboxing the Jolla VIP package or VIP Box as they call it by Amanda Lam, one of our great community members.
I am very disappointed about the fact that the other half that was specifically for the people who preordered the phone and helped Jolla come to existence, is now part of a VIP box. It is not special anymore.
If you're talking about "The First one" Otherhalf, it's for those who have pre-ordered the phone back in the time!


text:
De Sinfonia da requiem is een compositie voor symfonieorkest van Benjamin Britten. Het is volgens de officiële lijst zijn opus 20. Het was na Sinfonietta (opus 1) en Simple Symphony (opus 4) het derde werk van de componist waarvan de titel verwijst naar symfonie.

Geschiedenis
Britten kreeg de opdracht voor het werk uit Japan ter gelegenheid van de 2600ste verjaardag van het Japans Keizerrijk. De Japanners dachten dus dat Britten met een feestelijk werk kwam. Aan een deel van de titel, requiem, is te zien, dat het geen vrolijk en feestelijk werk was. De Japanners beschouwden voorts de titels van de delen uit de Christelijke liturgie een belediging en weigerden het werk. Het geheel kan wellicht gezien worden als bedoeling van de componist, die net als zijn leraar Frank Bridge overtuigd pacifist was en de daden van Japan in de jaren 1939 en 1940 wezen niet op een vredelievende natie. Hij gaf aan dat hij het componeerde ter nagedachtenis aan zijn ouders.

Britten voltooide het werk in juni 1940 toen hij in Amityville (New York) in de Verenigde Staten woonde. Japan en de VS Staten waren toen nog niet in oorlog (de Aanval op Pearl Harbor vond plaats op 7 december 1941). Britten mocht het geld dat hem voor de opdracht was gegeven houden. Hij kocht snel een Ford-auto, zodat de Japanse regering het niet konden terugvragen. Op 29 maart 1941 leidde dirigent John Barbirolli de New York Philharmonic in de première van dit werk in Carnegie Hall. Het werd ook de dag daaropvolgend gespeeld. Daarvan zijn opnamen verkrijgbaar met matige kwaliteit. Japanners konden het werk pas veel later horen, op 18 februari 1956 leidde Britten zelf de uitvoering met het NHK Symfonie Orkest. De uitvoering door John Barbirolli viel in eerste instantie in goede aarde bij Britten. Later had hij er gemengde gevoelens over, met name over de tempi die Barbirolli aanhield. De gemiddelde tijd voor deze symfonie is net 20 minuten. De opname met Barbirolli is net geen 23 minuten. Barbirolli bleef het werk echter spelen getuige de uitvoering op 22 januari 1969, toen hij het speelde met het Concertgebouworkest in het Amsterdamse Concertgebouw.

Programma 29 maart 1941
 Gioacchino Rossini: Ouverture L'Italiana in Algeri
Benjamin Britten: Sinfonia da requiem
 Pjotr Iljitsj Tsjaikovski: Symfonie nr. 4

Muziek
Britten week af van de vierdelige opzet van de klassieke symfonie en gaf aan dat het werk achterelkaar doorgespeeld moest worden. Er zijn drie delen, gerelateerd aan onderdelen van het Requiem:
Lacrymosa (Andante ben misurato)
Dies Irae (Allegro con fuoco)
Requiem Aeternam (Andante molto tranquillo)

Britten gebruikte dan wel titels uit de liturgie, hij had er geen religieuze bedoelingen mee. Zelf omschreef hij ze als Een langzame klaagzang in marsvorm, Dodendans en Het besluit. Het gehele stuk is geschreven in de toonsoort d majeur. Het Dies Irae kan gezien worden als het scherzo.

Orkestratie
3 dwarsfluiten met daarbij piccolo en altfluit, 2 hobo's, 1 althobo, 1 esklarinet, 2 besklarinetten, 1 basklarinet , 1 altsaxofoon (ad lib), 2 fagotten, 1 contrafagot
6 hoorns (waarvan 2 ad lib), 3 trompetten, 3 trombones, 1 tuba
 pauken, grote trom, kleine trom, bekkens, tamboerijn, zweep, xylofoon, 2 harpen (waarvan 1 ad lib),  piano
 violen, altviolen, celli, contrabassen

Discografie
Er zijn talloze opnamen van dit werk, Britten zelf nam het werk drie keer op.

2 Britten
Compositie van Benjamin Britten
Compositie voltooid in 1940

redpajama_set_name: RedPajamaWikipedia


text:
Lion escapes enclosure, kills worker
A lion killed a worker Sunday at a North Carolina zoological park after it escaped a locked enclosure during...
A lion killed a worker Sunday at a North Carolina zoological park after it escaped a locked enclosure during a routine cleaning, officials said.
As a team led by a trained animal keeper cleaned the enclosure, "One of the lions somehow left a locked space and entered the space the humans were in and quickly killed one person," the Conservators Center in Burlington, west of Durham, said on its Facebook page.
Apprenticeships and internships
Life forms
Workers and professionals
Destinations and attractions
"The Conservators Center is devastated by the loss of a human life today," the center said.
The center did not name the worker but the Caswell County Sheriff's Office identified her as Alexandra Black, a 22-year-old recent graduate of Indiana State University. Black, a native of New Palestine, Indiana, had been an intern at the Conservators Center for about two weeks, the sheriff's office said.
Black's "passion was the zoological industry -- this was not this person's first internship," the center's executive director, Mindy Stinner, said, according to CNN affiliate WNCN.
"And this person wanted to spend a lifetime around these animals," Stinner said in an emotional press conference.
Black was not a staff member but was working under the supervision of a staff member, according to Stinner.
Male lion was shot and killed
The male lion was euthanized, Stinner said. It was unclear how the lion escaped, the center said.
Stinner said all large cats are locked in a separate area from humans during the routine cleanings.
"At no time did the lion ever enter a space that was not enclosed by the park's perimeter fence," she said.
Stinner said visitors were at the park but officials safely and quickly got them out of the park.
"This is not a situation we've ever had before. Safety is a very, very important feature of running any zoological park," she said.
Center is closed until further notice
The zoological park houses more than 80 animals, including tigers, small wild cats and other small carnivores, according to its website. It offers guided walking tours near the animal enclosures. The park is regulated the US Department of Agriculture, according to Stinner.
Stinner, an educator, co-founded the center in 1999 in Mebane, North Carolina, as an educational nonprofit to provide a home for select carnivore species, according to the center's website. It relocated to a 45-acre swath in 2004, the website said.
Stinner said they first started doing rescue and sanctuary work, but moved away from that emphasis and worked with more species, trying to involve the community more.
"We like to think of ourselves as kind of a community zoo," she said.
The center is closed until further notice, officials said.
"We need to assess our situation, and we need to make sure that everyone here is safe and feels safe," Stinner said, "because this is a very scary thing."
Lion escapes enclosure, kills intern
Bear killed after escaping enclosure at German zoo
The woman accused of entering the Bronx Zoo lion enclosure was arrested
Massachusetts teen's mauled body found in enclosure with dogs he was tending
Mountain lion euthanized after killing woman's pet dog
Intern killed by lion died 'following her passion'
'Lion King' first look released
Construction worker killed in 40-foot fall


text:
Nicole Sewell (born 1981) is a former professional tennis player from Australia.

Biography
A right-handed player from Perth, Sewell was most prominent on the doubles circuit, with 11 ITF titles and a best ranking of 107 in the world. She made most of her Grand Slam and WTA Tour main-draw appearances partnering Casey Dellacqua.

She is the daughter of former East Fremantle and Footscray footballer Jim Sewell.

ITF finals

Singles (1–1)

Doubles (11–12)

References

External links

1981 births
Living people
Australian female tennis players
Tennis players from Perth, Western Australia


text:
1st Conference of Transportation Research Group of India (CTRG)
7th -10th December, 2011
CTRG Photos
How To Reach CTRG Venue
Media Link
Committee››
- Organizing Commitee
- Advisory Committee
Abstract and Full Paper Review Policy
Download Presentation Guidelines
K. Sinha, Purdue University, USA
Hardik R. Shah, American Structurepoint, Inc., USA (ATPIO – President)
Anuj Sharma, University of Nebraska, USA (ATPIO – Vice President)
S. Peeta, Purdue University, USA
R. Pendyala, Arizona State University, USA.
C. Bhat, UT Austin, USA
P. Mokhtarian, UC Davis, USA
S. Nambisan, Iowa State University, USA
Dimitrios A. Tsamboulas, National Technical University of Athens (NTUA), Greece
R. Macario, IST, Portugal
N. Geroliminis, EPFL, Switzerland
M. G. H. Bell, Imperial College London, U.K.
J. D. Hunt, University of Calgary, Canada
S. Somenahalli, Univ. of South Australia, Australia
Imad Al-Qadi, University of Illinois
Fwa Tien Fang, National university of Singapore
Hussain U. Bahia, Wisconsin Madison
Soheil Nazarian, University of Texas at El Paso
Erol Tutumluer, University of Illinois
Eugene Johnson, Wisconsin Department of Transportation
Chetana B. Rao, Applied Research Associates, Inc., USA
Venkat Pindiprolu, Federal Transit Administration, USA
Jagannath Mallela, Applied Research Associates, Inc., USA
Jeannie G. Beckett, The Beckett Group. USA
Thomas H. Wakeman III, Center for Maritime Systems, Stevens Institute of Technology, USA
Srinivas S. Pulugurtha, University of North Carolina at Charlotte
Ramakrishna R. Tadi, California Department of Transportation
Shishir Mathur, Urban and Regional Planning Department, San Jose State University
G. P. Jayaprakash, Transportation Research Board, USA
Dominique Mignot, IFSTTAR, France
Fabien Leurent, ENPC, France
Y. Hayashi, Nagoya University, Japan
S. S. Ganji, Islamic Azad University, Tehran, Iran
Manoj K. Jha, Morgan State University, USA
Arun Kumar, Queensland University of Technology, Australia
National Advisory Committee
B. B. Pandey, IIT Kharagpur
P. L. Bongirwar, L&T (ECC)
K. A. Raju, TCS, Mumbai
M. P. Raju, LASA, New Delhi
G. R. Madan, Mumbai Metropolitan Region Development Authority (MMRDA)
K. Harinarayana, National Aerospace Laboratories (NAL)
C.E.G. Justo, Bangalore
S. K. Lohia, Ministry of Urban Development (MOUD), Govt. of India
S. Gangopadhyay, Central Road Research Institute (CRRI), New Delhi
R. Sivanandan, IIT Madras
T. Arasan, IIT Madras
K. V. Krishna Rao, IIT Bombay
S. L. Dhingra, IIT Bombay
R. R. Kalaga, IIT Delhi
M. Parida, IIT Roorkee
K. S. Reddy, IIT Kharagpur
P. K. Sikdar, Intercontinental Consultants and Technocrats Pvt. Ltd., (ICT), New Delhi
P.K. Sarkar, School of Plannning and Architechture, New Delhi
You are the Visitor This site is optimised for 1024X768 screen resolution and IE 7.0 and above Flash Player 8.0 required All contents © trgindia.org All rights reserved
Powered & Maintained by


Anyway, the rules are pretty similar to other contests. This is round 47 so please know that ALL rounds will count EQUALLY toward the final standings, and NO rounds will be omitted from the final total.
FYI, OS of Plucker Anthem is "Trucker Anthem"
A Kid Rock-in' round! Well done!